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(U) Module 5 

(U) The Analytical and Technical Work Roles 

(U) This module will enable you to: 

• (U) Compare and contrast the analytical and technical work roles 

• (U) Identify analytical and technical personnel’s authorization to touch the data 

• (U) Identify how the authorities impact interactions with other roles and the data 
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(U) (Technical Character): During this part of our trip we will compare and contrast the analytical and technical work roles and provide you with a basic 
knowledge of the two distinct areas. This will serve as an introduction to the more role-specific module you will complete later. 

(U) This module will enable you to: 

• (U) Compare and contrast the analytical and technical work roles 

• (U) Identify analytical and technical personnel’s authorization to touch the data 

• (U) Identify how the authorities impact interactions with other roles and the data 
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( TS//S I //NF ) The Analytical Work Role includes these primary functions: 

• HMC 

• Those who conduct intelligence analysis queries 

• Those who can view and disseminate the results of intelligence analysis queries 



(U) Begin with image of HMC Character 
and Technical Character sitting at a table, 
then provide a close up of the HMC 
Character 



( TS//S I //NF ) (HMC Character): The analytical work role includes three primary functions: Homeland Mission Coordinators (HMC), those who can conduct 
intelligence analysis queries, and those who can view and disseminate the results of intelligence analysis queries. 



( TS//S I //NF ) Homeland Mission Coordinators, or HMCs, review and approve the RAS nominations. The analysts and HMCs work through the RAS approval 
process together to get the identifiers RAS-approved. 

( TS//S I //NF ) Recall from the last module that not al^nalvst^r^Denmited to conduct contact chaining queries. Those who are permitted to conduct 
queries of the bulk metadata have been arantec^^^^^^H^^^^^Jcredentials. Those who are permitted to view and disseminate query results, but 
not conduct queries, have been granted |^|^^^^^^^^^rodential^ 
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( TS//S I //NF ) The Technical Work Role is m ade up of tw o main functions: 

• Support to Collection and Metadata 

• Support to Storage, Presentation, and Maintenance 
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( TS//S I //NF ) (Technical Character): The work performed by technical personnel in support of the Bulk Metadata Programs assists everyone working in 
support of these programs to maintain complia nce with ap plicable legal documents and relevant authorities. Within the technical roles, there are two main 
areas of responsibility: collection and metadata ^^^^^|and the storage, presentation, and maintenance of the metadata. 

f TS//S I //NF) Some high-level examples of how key organizations support collection and metadata ^^^^^|include: 

to gain access to BR and P R/TT metad ata, 
the collection and metadata^^^^^^nd standardization. 

• Mission Capabilities (TD) integrates the BR and PR/TT protocol processing software into the larger exploitation systems. 

( TS//S I //NF ) Mission Capabilities also support the storage, presentation, and maintenance aspects of the Bulk Metadata 

Programs, and some high-level examples include: 

• Mission Capabilities manages the BR and PR/TT repositories, as well as prepares the metadata for the analysts to use. 

• p r ° v id es reasonable assurance that the data is normalized and presented in a usable format and provides support to 
intelligence analysts. 
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(U) Authorization to Touch the Data 

(U) Analytical and technical personnel have different authorization to touch the metadata 
due to the nature of their work roles 
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(U) Authorization for Analytical Personnel 

Perform intelligence analysis (querying the 



U) Authorizations for Technical Personnel 




Create, test, and implemenUool^m^ this 
data easier for analytic personnel to use 
Validate tha^afeauaj^^nnropriately control analyst’s access 
i I i 'I Perform processes to make the data usable 

o Validation 
o Defeat of collection 
o Processing 

o Analysis of high-volume identifiers 
o Maintenance of records to demonstrate compliance 



( TS//S I //NF ) (Technical Character): As we have discussed throughout the course, the sensitivity of the data drives many of the policies and restrictions that 
control access to the BR and PR/TT bulk metadata. However, because of the different roles and responsibilities of analytical and technical personnel, both 
have different authorizations to touch the metadata. Recall from Module 1 we defined “touching the data” as any form of data handling that creates an 
opportunity for a violation of the FISC Orders to occur. These activities may include data acquisition, modifying/preparing the data, querying, viewing results 
of the queries, and even oversight and compliance functions. 

Analytic Personnel Info (audio file name OVSC 1 205_M5_5040_A): 

( TS//S I //NF ) (HMC Character): Analytic personnel have authorization to touch the metadata to perform intelligence analysis. Analyst actions, such as 
querying the metadata for intelligence analysis purposes, must be done in a controlled way via tools designed to limit intelligence analysis access to RAS- 
approved identifiers and to the appropriate number of hops. Using these tools also provides reasonable assurance that these queries are tracked and 
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audited. 

Technical Personnel Info (audio file name OVSC 1 205_M5_5040_T): 

( TS//S I //NF ) (Technical Character): Technical personnel create, test, and implement tools to make this data easier for analytic personnel to use, while 
validating that safeguards appropriately control analysts' access to the bulk metadata. Additionally, technical personnel may access the metadata to 
perform those processes needed to make the metadata usable for in telliaenc^na lysis. These processes may include metadata validation; the defeat 
of the collection, processing, or analysis of metadata associated with identifiers; and the maintenance of records to demonstrate 

compliance with the terms of the authority. 

(TS//S I //K F^r^rder to do this work effectively, technical personnel are allowed to access the metadata using identifiers that are not RAS-approvecMr^he 
caseof^^^^^^B identifiers, technical personnel may use non-RAS-approved identifiers to query the metadata to confirm if the identifier is am[ 
BBHidentifier and thus should not be included for target analysis. They may then share the identifier and the fact that it is a^^^^^^|identifier 
with authorized personnel. However, no other information resulting from such queries can be used for intelligence analysis purposes. 

( TS//S I //NF ) Technicahcereonnel must take great care with their responsibilities because they may be accessing the data through tools that do not have 
safeguards, such as that impose restrictions and minimize the chances of a violation of the FISC Orders. As a result, we need to maintain 

boundaries between technical and analytical personnel, and be crystal clear as to the circumstances under which the two groups can interact. 
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(U) (Begin with image of analytical and Technical Character sitting at a table, then provide a close up of the 
Technical Character) 

( TS//S I //NF ) All interactions must be based on RAS-approved identifiers and those results found within the 
number of hops authorized for intelligence analysis purposes 



(U) Insert image of HMC Character and 
Technical Character sitting at a table 



( TS//S I //NF ) (Technical Character): As we just discussed, analytical and technical personnel have different authorizations to touch this metadata. 
Because of these differe nt authorizatio ns, we must be careful when the two types of personnel are interacting with regard to this metadata. Specifically, 
outside of the sharing of identifiers for defeat purposes, technical personnel should only be providing analytical personnel information 

under certain conditions. 

( TS//S I //NF ) (HMC CharacterTSometimes, when analyzing the results of intelligence analysis queries, one or more of the specific results may seem out 
of the ordinary. Is it a identifier that was overlooked? Is the identifier misnormalized? Is there something that just seems out of place? Or 

perhaps there is a particular data field in your results that you don’t understand. In such instances, intelligence analysts may require assistance from 
certain technical personnel responsible for data integrity functions. 

( TS//S I //NF ) (Technical Character): In these instances, technical personnel may assist authorized intelligence analysts, but any and all assistance must 
be based on RAS-approved identifiers and those results found within the number of hops authorized for intelligence analysis purposes. Essentially, 
when providing information to analytical personnel in these circumstances, the technical personnel must abide by the rules for the analytical personnel. 

( TS//S I //NF ) (Technical Character): In the end, all personnel have a vested interest and shared responsibility in ensuring that only the most accurate 
intelligence information is reported to customers, while abiding by the policies and requirements in place for this metadata. 
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1 . ( TS//S I //NF ) TRUE or FALSE: Technical personnel and analytic work roles have the same authorization to 
touch the bulk metadata. 

a) TRUE 

b) FALSE 
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2. ( TS//S I //NF ) The Analytic Work Role includes these functions: intelligence analysts who query the data, 

intelligence analysts who can view the results of intelligence analysis queries, and . 

a) Mission Capabilities (TD) 




3. ( TS//S I //NF ) The Technical Work Roles are comprised of two general areas of responsibility including 1) 
and 2) . 

a) 1) collection and metadata reviewing RAS nominations 

b) 1) collection of content, 2) storage, presentation, and maintenance of the metadata 



c) 

d) 



1) reviewing RAS nominations, 2) working with the telecommunications partners 

1) collection and metadata 2) storage, presentation, and maintenance of the 
metadata 



(U) (Technical Character): Let's make a few notes in our travel journal and see what we remember from this topic. 



ANSWERS: 

Question 1 . ( TS//S I //NF ) Correct! The answer is b) FALSE. Technical personnel have authority to make the metadata usable for intelligence analysis, while 
analytical personnel can only touch the bulk metadata for intelligence analysis purposes using RAS-approved identifiers within the authorized number of 
hops. 

( TS//S I //NF ) Incorrect. The correct answer is b) FALSE. Technical personnel have authority to make the metadata usable for intelligence analysis, while 
analytical personnel can only touch the bulk metadata for intelligence analysis purposes using RAS-approved identifiers within the authorized number of 
hops. 
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Question 2. ( TS//S I //NF ) Correct! The correct answer is c). The Analytical Work Role includes analysts and Homeland Mission Coordinators (HMC). 
( TS//S I //NF ) Incorrect. The correct answer is c). The Analytical Work Role includes analysts and Homeland Mission Coordinators (HMC). 



Question 3.f TS//S 
metadata I 



4/ /NF) Right! The correct answer is d). The Technical Work Roles are comprised of two general areas of support including collection and 



|as well as storage, presentation, and maintenance of the metadata. 

(TS/ASI//N F) Incorrec t. The correct answer is d). The Technical Work Roles are comprised of two general areas of support including collection and 
metadata ^^^^Has well as storage, presentation, and maintenance of the metadata. 
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(U) Knowledge Check 

4. (TS//SI//NF) staff have access to the bulk metadata in order to prepare the metadata for 

the analysts 

a) HHHHHi 

b) Mission Capabilities (TD) 

c) Analytical 

d) Office of General Counsel (OGC) 

5. (TS//SI//NF) If an intelligence analyst seeks assistance from technical personnel, technical personnel 


ALT TAG: 
GRAPH IC/AV: 


a) can query the metadata to confirm the analyst’s results and point out potentially noteworthy 
contacts at the third or fourth hop 

b) should explain that they are unable to assist in any way, except to identify^^^^^^£ 
identifiers 

c) may offer assistance, but must be cautious that any results shared or discussed are 
based on a RAS-approved identifiers and those results that fall within the number of hops 
authorized for intelligence analysis purposes 

d) should provide whatever assistance is needed, but make a note of it in case anyone in 
management has questions later 

e) should decline to assist because technical personnel should not assist intelligence analysts 


(No audio or transcript on this page) 




Question 4. (TS//SI//NF) Correct! Mission Capabilities staff has access to the bulk metadata in order to prepare the metadata for the analysts to use. 
(TS//SI//NF) Incorrect. The correct answer is b). Mission Capabilities staff has access to the bulk metadata in order to prepare the metadata for the analysts 
to use. 

Question 5. (TS//SI//NF) Correct! If an intelligence analyst seeks assistance from technical personnel, technical personnel may offer assistance, but 
must be cautious that any results shared or discussed are based on RAS-approved identifiers and those results that fall within the number of hops 
authorized for intelligence analysis purposes. 

(TS//SI//NF) Incorrect. The correct answer is c). If an intelligence analyst seeks assistance from technical personnel, technical personnel may offer 
assistance, but must be cautious that any results shared or discussed are based on RAS-approved identifiers and those results that fall within the 
number of hops authorized for intelligence analysis purposes. 
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(U) Summary 

(U) Now that you have completed this module you should be able to: 

• (U) Compare and contrast the analytical and technical work roles 

• (U) Identify analytical and technical personnel’s authorization to touch the data 

• (U) Identify how the authorities impact interactions with other roles and the data 
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(U) (Technical Character): Now that we have completed this part of our road trip, you should be able to: 

• (U) Compare and contrast the analytical and technical work roles 

• (U) Identify analytical and technical personnel’s authorization to touch the data 

• (U) Identify how the authorities impact interactions with other roles and the data 

(TS//SI//NF) (Technical Character): Now that you are aware of the various roles that support the BR and PR/TT Programs you will move on to your role- 
specific module that will go into additional detail on topics relevant to your responsibilities. 
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